$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f9e37ef9-ac4a-3d5f-b369-5b28c5782ac5.roa File: f9e37ef9-ac4a-3d5f-b369-5b28c5782ac5.roa (raw, json) Hash identifier: 3wcj7XYSyq4GIDJqQWHouwuWCVoW+Vitfr+Lcx9rMuA= Subject key identifier: 23:CE:F5:88:C8:74:A0:89:4D:CD:45:63:61:3B:D7:35:E5:6A:1C:D4 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584A40A9F964B814BD7F5EB8D260 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f9e37ef9-ac4a-3d5f-b369-5b28c5782ac5.roa Signing time: Fri 20 Jun 2025 09:34:58 +0000 ROA not before: Fri 20 Jun 2025 09:34:58 +0000 ROA not after: Thu 18 Sep 2025 09:34:58 +0000 asID: 22773 IP address blocks: 98.167.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:40:a9:f9:64:b8:14:bd:7f:5e:b8:d2:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jun 20 09:34:58 2025 GMT Not After : Sep 18 09:34:58 2025 GMT Subject: CN=b1ba070c-cd8e-4b84-b631-c9ca4fd1cb45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:35:bf:a1:d1:50:c1:49:a4:56:b6:96:29:90: e2:36:2f:09:4e:66:f0:65:5c:86:32:f3:ae:c0:bc: 3b:83:41:f3:cd:51:f7:3c:66:a1:f0:0b:cc:11:b1: 8a:7c:10:8e:07:7e:a2:37:f0:b0:f4:79:7e:b4:25: 22:6b:ae:10:69:86:89:2d:82:30:19:d7:f4:53:1a: 3f:01:7c:d7:1e:ab:e6:92:6e:1a:ca:8c:f8:32:d2: bd:7c:d2:a2:de:b1:fe:ba:bb:80:07:a6:99:9a:f4: 27:f7:cd:f8:30:25:a4:d6:bc:6c:73:19:5c:e3:d1: 4b:ce:d1:d8:50:39:de:8f:ec:a6:81:e2:1c:f7:ad: 28:fc:ce:4d:36:65:cd:87:4b:af:29:0b:a9:74:ff: 74:98:8d:cc:00:54:1a:9b:1e:e5:7c:3b:1f:84:e5: 07:2a:bc:3a:ce:d1:79:f6:3c:4e:1f:b5:49:d1:33: 07:80:ab:4b:ab:61:5a:b6:2b:a7:84:ce:13:04:93: ca:8a:f2:bd:16:ee:ff:44:d6:91:53:3d:57:d4:04: e5:56:82:42:2a:98:61:e6:b0:51:5b:e3:a0:7b:9e: d1:e1:ca:be:4b:7f:a7:40:5d:92:5c:e1:82:f6:ff: 94:36:38:19:8e:f7:e6:f9:f9:1f:50:4e:d8:48:28: 4e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:CE:F5:88:C8:74:A0:89:4D:CD:45:63:61:3B:D7:35:E5:6A:1C:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f9e37ef9-ac4a-3d5f-b369-5b28c5782ac5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.167.57.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:a7:66:8c:9f:0f:19:41:f5:43:85:79:97:78:b1:90:87:a0: c7:73:49:7f:02:a3:eb:c3:26:28:3a:cb:be:b4:6a:e5:d7:c5: b8:ef:46:c4:0b:a1:bf:2f:56:a5:4b:cd:a0:43:33:3e:62:b1: 8e:9d:07:b7:e7:1c:80:39:8f:b7:db:13:d8:2d:1d:80:51:af: d0:27:96:b6:10:f7:ea:b8:a6:45:35:ab:4f:7e:85:c7:d3:0b: 20:e9:2e:ff:1b:e4:9e:df:81:2b:d6:f7:c5:4d:e2:25:32:dc: ef:c8:dd:c0:b1:cc:9c:8e:da:e5:48:44:d9:e6:2a:b4:c6:eb: c5:cc:8d:57:b5:2f:94:bc:8a:20:4d:2e:53:ab:da:8d:5c:22: 92:90:36:ac:0b:6e:e1:8a:01:ee:3c:9c:8e:cc:2a:5e:3a:65: dc:6a:5e:e2:11:23:68:03:e7:f5:ef:87:9d:d1:67:34:c1:70: 65:75:23:9e:dd:b3:05:99:42:be:9b:2d:25:19:13:bc:65:6b: 6f:b1:a5:e0:0d:9b:e2:e0:8d:28:a5:34:df:63:7b:a2:54:ef: fe:e7:6b:87:fc:42:66:9c:27:5f:d0:5c:77:17:5f:b8:60:41: a4:2d:08:e8:84:cc:ad:62:8d:6b:51:09:3d:ba:a3:f2:94:8e: 43:dc:c3:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAqflkuBS9f1640mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDYyMDA5MzQ1OFoXDTI1MDkxODA5MzQ1OFowLzEtMCsGA1UEAxMk YjFiYTA3MGMtY2Q4ZS00Yjg0LWI2MzEtYzljYTRmZDFjYjQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDW/odFQwUmkVraWKZDiNi8JTmbwZVyGMvOu wLw7g0HzzVH3PGah8AvMEbGKfBCOB36iN/Cw9Hl+tCUia64QaYaJLYIwGdf0Uxo/ AXzXHqvmkm4ayoz4MtK9fNKi3rH+uruAB6aZmvQn9834MCWk1rxscxlc49FLztHY UDnej+ymgeIc960o/M5NNmXNh0uvKQupdP90mI3MAFQamx7lfDsfhOUHKrw6ztF5 9jxOH7VJ0TMHgKtLq2FatiunhM4TBJPKivK9Fu7/RNaRUz1X1ATlVoJCKphh5rBR W+Oge57R4cq+S3+nQF2SXOGC9v+UNjgZjvfm+fkfUE7YSChOHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCPO9YjIdKCJTc1FY2E71zXlahzUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZjllMzdlZjktYWM0YS0z ZDVmLWIzNjktNWIyOGM1NzgyYWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYqc5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHmnZoyfDxlB9UOFeZd4sZCHoMdzSX8Co+vDJig6y760auXXxbjvRsQL ob8vVqVLzaBDMz5isY6dB7fnHIA5j7fbE9gtHYBRr9AnlrYQ9+q4pkU1q09+hcfT CyDpLv8b5J7fgSvW98VN4iUy3O/I3cCxzJyO2uVIRNnmKrTG68XMjVe1L5S8iiBN LlOr2o1cIpKQNqwLbuGKAe48nI7MKl46ZdxqXuIRI2gD5/Xvh53RZzTBcGV1I57d swWZQr6bLSUZE7xla2+xpeANm+LgjSilNN9je6JU7/7na4f8QmacJ1/QXHcXX7hg QaQtCOiEzK1ijWtRCT26o/KUjkPcw78= -----END CERTIFICATE-----Generated at Tue Jul 1 14:08:56 2025 by rpki-client